CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-114067Trigger.dev 4.5.0 before 4.6.2 Improper Authorization via snapshot-url Session Routetriggerdotdev trigger.dev
- CVE-2026-114066Trigger.dev before 4.7.0 Missing Authorization via Batch parentRunId Waitpointstriggerdotdev trigger.dev
- CVE-2026-114065Trigger.dev before 4.7.3 Tenant Filtering Bypass via Query Table Placeholderstriggerdotdev trigger.dev
- CVE-2026-114064Snipe-IT before 8.7.0 SSRF Port Scanning via Webhook Testing Endpointgrokability snipe-it
- CVE-2026-114063SvelteKit 2.10.0 before 3.0.0 Path Traversal via vite preview on Windowssveltejs kit
- CVE-2026-114062SvelteKit before 3.0.0 SSRF via Redirects in Server-Side Self-Fetch Fallbackssveltejs kit
- CVE-2026-114061SvelteKit before 3.0.0 XSS via Cache-Control Header in Prerendered Pagessveltejs kit · @sveltejs/kit
- CVE-2026-114060SvelteKit before 3.0.0 Open Redirect via Enhanced Form Actionssveltejs kit · @sveltejs/kit
- CVE-2026-114059ArcadeDB before 26.10.1 RCE via Gremlin Groovy Engine Missing AuthorizationArcadeData arcadedb
- CVE-2026-114058ArcadeDB from 26.2.1 before 26.10.1 Missing Authorization via Bolt ProtocolArcadeData arcadedb
- CVE-2026-114057ArcadeDB 26.2.1 before 26.10.1 Bolt SHOW DATABASES Information DisclosureArcadeData arcadedb
- CVE-2026-114056ArcadeDB from 26.8.1 before 26.10.1 Authorization Bypass via ALTER TYPE WITHArcadeData arcadedb
- CVE-2026-114055vLLM 0.7.3 before 0.31.0 DoS via Unvalidated mm_processor_kwargsvllm-project vllm · vllm
- CVE-2026-114054vLLM before 0.31.0 Cross-Request Cache Aliasing via EXIF ImageID and Prefix-Cache Keysvllm-project vllm · vllm
- CVE-2026-114053vLLM 0.7.3 before 0.31.0 RCE via mm_processor_kwargs.code_revisionvllm-project vllm · vllm
- CVE-2026-114052vLLM 0.25.0 before 0.31.0 MOSS-Audio Memory Exhaustion via /tokenize mm_processor_kwargsvllm-project vllm · vllm
- CVE-2026-114051vLLM before 0.31.0 Denial of Service via min_tokens in /inference/v1/generatevllm-project vllm
- CVE-2026-114050vLLM before 0.31.0 Remote Engine Crash via Forged Multimodal UUIDvllm-project vllm · vllm
- CVE-2026-114049vLLM before 0.31.0 Stale allowed_token_ids Mask via InputBatch.condensevllm-project vllm
- CVE-2026-114048WWBN AVideo before 24.0 CSRF via Legacy Playlist and Video EndpointsWWBN AVideo
- CVE-2026-114047FreeRDP 2.0.0 before 3.32.0 Proxy Improper TLS Certificate ValidationFreeRDP
- CVE-2026-114046FreeRDP 3.0.0 before 3.32.0 null-pointer dereference via emulated smartcardFreeRDP
- CVE-2026-114045FreeRDP before 3.32.1 Heap Buffer Overflow via rdpsnd_server_select_formatFreeRDP
- CVE-2026-114044FreeRDP before 3.32.1 Android Client Heap OOB Read via Graphics PipelineFreeRDP
- CVE-2026-114043Vulnerability in FreeRDPFreeRDP
- CVE-2026-114042FreeRDP 3.32.0 Use-After-Free via drdynvc Virtual Channel PDUFreeRDP
- CVE-2026-114041FreeRDP before 3.32.1 Heap Out-of-Bounds Read via RD Gateway Consent MessageFreeRDP
- CVE-2025-71437Astral uv through 0.8.21 Path Traversal via Symlinks in Sdist Tar Extractionastral-sh uv
- CVE-2021-48020Vyper before 0.3.0 Memory Corruption via Internal Function Calls in Arraysvyperlang vyper · vyper
- CVE-2021-48019Vyper before 0.2.9 Incorrect RETURNDATASIZE in create_forwarder_to Proxiesvyperlang vyper · vyper